Posted by niemandhier 14 hours ago
Though I'm often running into frustrating (albeit intentional) sandbox restrictions with common workflows e.g. xcode/swift and Docker access.
Would love suggestions for how to give agents access to those kinds of tooling inside the sandbox, either with srt or an alternative (with similar convenience characteristics).
I know there are distinct camps here, and the long term story may evolve - but for now I just want the whole harness inside a sandbox - ideally, a full VM - and THEN you can further sandbox things it runs if you really want different tiers within that.
EDIT: I added to my profile after the above comment so it is a valid point.
These techniques can actually be combined and will be combined in the long-term I think. You may have LSM-based sandboxes that exist in Docker-based sandboxes.
Plus you're forced to move at their pace which is unfortunate sometimes. Granted Amazon's bedrock stuff is slow and disappointing but at least I can rejig it work in conjunction with other aws products.
And if you're prepared to not use anthropic but any cloud provider for your infra then you can do whatever you like elsewhere. Just use docker sandbox or iron proxy to replicate network control/cred swapping (iron even does sigv4 re-signing).
Now if Microsoft will start addressing the fact that VSCode remote ssh exposes your host to attack from the sandbox...
They are the premier manufacturer of electronics that power all the current AI. Why wouldn't they be contributing heavily to the space?
They also make legal threats I think.
The economist literally called Nvidia the "Central Bank of AI". https://www.economist.com/interactive/briefing/2026/09/03/nv...
I'd argue that Nvidia is the biggest and most important AI company in the world.
The vast majority of gaming market share and revenue comes from mobile, where Nvidia doesn't participate.
The next biggest is consoles, and neither Xbox nor PS uses Nvidia cards.
That only leaves the PC GPU market, which they do dominate, but still split with AMD.
And all of this is only for hardware. Nvidia doesn't make or publish games, and doesn't own any distrubution channels.
So I doubt Nvidia makes a meaningful chunk of the overall gaming industry revenue.
Doesn't seem that wild to me considering it is less that they abandoned the gaming market to any strong competitors and more that the gaming market is both basically irrelevant compared to the money being shoveled into AI and is also to some degree being strangled to death by AI because of the overlap in supply chain inputs.
Unhelpful, I know
We're not in FreeBSD jails anymore, Toto.
But I'm trying to be a "greatness is other people" (Pantheon) person.
After that we can segment then into civilizations! The [?] processing unit is the limit!